Privacy & Management of Personal Data

1. Data controller, scope and governance

Nnph acts as the data controller for Personal Data collected in connection with its services. This privacy policy governs how we collect, use, store, disclose and safeguard Personal Data in relation to account creation, gameplay, financial transactions, customer support and related interaction with Nnph platforms.

2. What personal data we collect

• Identity data: name, date of birth or age, and government-issued identifiers where required for verification.
• Contact data: postal address, email address, telephone number and other means to reach you.
• Account data: username, password, security questions, profile preferences and transaction activity related to your account.
• Financial data: payment method details, bank account or card information, and records of transactions and payouts.
• Technical data: IP address, device type, browser type and version, and other information collected by cookies and similar technologies.
• Usage and marketing data: information about how you interact with our services, communications preferences and responses to promotions.
• Verification data: documents and information required to verify identity and assess integrity of accounts and activity.

3. How we collect and process data

We collect data directly from you when you register, transact, or communicate with us. We also collect data automatically through the operation of our platforms, including server logs and cookies, and we may receive data from payment processors, identity verification providers and other service partners. We process Personal Data to operate, maintain and improve our services, support customers and enforce our terms and policies, subject to applicable law.

4. Purposes for which we use personal data

• To enable and administer the services you request, including account management and gameplay.
• To process payments, verify transactions and prevent unauthorized activity.
• To verify identity and comply with legal and regulatory obligations, including anti-fraud and anti-money-laundering controls.
• To provide customer support and respond to inquiries.
• To communicate about your account, and, with your consent, to send marketing information about our products and promotions or those of carefully selected partners.
• To analyze and improve our services, including security enhancements and service quality efforts.

You may opt out of marketing communications at any time via in-platform settings or by contacting our support team. Opting out will not affect the provision of essential services.

5. Sharing and disclosure of personal data

We may disclose Personal Data to:

• Authorized service providers and partners assisting with the operation of our platform, payments, identity verification and customer support;
• Regulators, law enforcement or other competent authorities as required by law or to protect our rights and the safety of users;
• When we have a legitimate interest to detect, investigate or prevent fraud, or if you breach our terms and conditions;
• Researchers on an aggregated and anonymized basis for the purposes of improving responsible gaming initiatives;
• With your consent or at your direction.

We do not sell Personal Data to third parties for their own direct marketing purposes.

6. Legal bases for processing

We rely on the following legal bases for processing Personal Data: (a) performance of a contract with you; (b) compliance with legal or regulatory obligations; (c) legitimate interests in providing, securing and improving our services and preventing wrongdoing; and (d) consent where applicable for marketing or other processing. When consent is required, it will be freely given, specific, informed and unambiguous.

7. Cookies and tracking technologies

We use cookies and similar technologies to manage sessions, remember preferences and analyze site usage. We categorize cookies as strictly necessary, operational or analytics, and may deploy persistent cookies or local storage. You may adjust browser settings to decline cookies; some features may not function without cookies. We may use third-party analytics providers in a manner consistent with this policy. We may also use local storage and flash storage in accordance with applicable laws, and you can manage these settings in your browser or device settings.

8. International transfers and data security

Personal Data may be transferred to and processed in jurisdictions outside your country, including jurisdictions that may not provide equivalent data protection. In such cases we implement appropriate safeguards, including contractual protections, to ensure a level of data protection equivalent to that in our jurisdiction. We employ industry-standard security measures, including encryption of data in transit via secure protocols and encryption at rest, access controls, and routine security reviews.

9. Data retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes and enforce agreements. We periodically review retained data and securely delete or anonymize data when it is no longer needed.

10. Your rights

You may exercise the following rights in relation to your Personal Data, subject to applicable law and any legal limitations:

• Right of access to confirm what data we hold and obtain copies;
• Right to rectify inaccurate or incomplete data;
• Right to erasure where processing is no longer necessary or unlawful (subject to exceptions for regulatory or contractual needs);
• Right to restrict processing in certain circumstances;
• Right to data portability where applicable;
• Right to object to processing based on legitimate interests or direct marketing;
• Right to withdraw consent where processing is based on consent;
• Right to lodge a complaint with a supervisory authority.

Requests should be submitted through the in-platform privacy center or by contacting our support team. We will respond within one month, with possible extensions for complex cases. We will verify identity prior to disclosing data.

11. Minors

Nnph services are not aimed at individuals under the age of eighteen. If information from a minor is received, we will promptly purge it from our systems unless lawful permission is established to retain it for regulatory or safeguarding purposes.

12. Data protection contact

Nnph maintains a data protection governance role responsible for monitoring compliance with this policy. You may reach them through the standard support channels available in your account interface or via the privacy section of our platform. A response will be provided in a manner consistent with applicable data protection laws and timelines.

13. Security incident response

In the event of a data breach or security incident affecting Personal Data, we will assess the impact, notify affected individuals as required by law and cooperate with relevant authorities. Remediation measures will be implemented promptly to mitigate risk and prevent recurrence.

14. Changes to this policy

We may update this privacy policy from time to time. We will publish the revised terms on our platforms and indicate the date of the latest update. We encourage regular review to understand how we protect your data.

15. Effective date

This privacy policy takes effect on the date of its latest publication and governs all Personal Data processed in connection with Nnph services thereafter.